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Abstract. The classic all-terminal network reliability problem posits a graph, each of whose 
edges fails independently with some given probability. The goal is to determine the probability that 
the network becomes disconnected due to edge failures. This problem has obvious applications in 
the design of communication networks. Since the problem is )fP-complete, and thus believed hard 
to solve exactly, a great deal of research has been devoted to estimating the failure probability. In 
0^ ' this paper, we give a fully polynomial randomized approximation scheme that, given any n-vertex 

graph with specified failure probabilities, computes in time polynomial in n and 1/e an estimate for 
the failure probability that is accurate to within a relative error of 1 ± e with high probability. We 
also give a deterministic polynomial approximation scheme for the case of small failure probabilities. 
Some extensions to evaluating probabilities of fc-connectivity, strong connectivity in directed Eulerian 
graphs, r-way disconnection, and evaluating the Tutte Polynomial are also described. 
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1. Introduction. 

1.1. The Problem. We consider a classic problem in reliability theory: given a 
network on n vertices, each of whose m links is assumed to fail (disappear) indepen- 
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dently with some probability, determine the probability that the surviving network 
is connected. The practical applications of this question to communication networks 
are obvious, and the problem has therefore been the subject of a great deal of study. 
A comprehensive survey can be found in [?] . 
' Formally, a network is modeled as a graph G, each of whose edges e is presumed 

to fail (disappear) with some probability p e , and thus to survive with probability q e = 
l—p e . Network reliability problems are concerned with determining the probabilities 
of certain connectivity-related events in this network. The most basic question of 
all-terminal network reliability is determining the probability that the network stays 
connected. Others include determining the probability that two particular nodes stay 
connected (two terminal reliability), and so on. 
, Most such problems, including the two just mentioned, are (CP-complete [?, ?]. 

That is, they are universal for a complexity class at least as intractable as MV and 
therefore seem unlikely to have polynomial time solutions. Attention therefore turned 
■ to approximation algorithms. Provan and Ball [?] proved that it is {jP-complete even 

to approximate the reliability of a network to within a relative error of e. However, 
they posited that the approximation parameter e is part of the input, and used an 
exponentially small e (which can be represented in 0(n) input bits) to prove their 
claim. They note at the end of their article that "a seemingly more difficult unsolved 
problem involves the case where e is constant, i.e. is not allowed to vary as part of 
the input list." 

Their idea is formalized in the definition of a polynomial approximation scheme 
(PAS). In this definition, the performance measure is the running time of the approx- 
imation algorithm as a function of the problem size n and the error parameter e, and 
the goal is for a running time that is polynomial in n for each fixed e (e.g. 2 1 / e n). If 
the running time is also polynomial in 1/e, the algorithm is called a fully polynomial 
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approximation scheme (FPAS). An alternative interpretation of an FPAS is that it 
has a running time polynomial in the input size when e is constrained to be input 
in unary rather than binary notation. When randomization is used in an approxi- 
mation scheme, we refer to a polynomial randomized approximation scheme (PRAS) 
or fully polynomial randomized approximation scheme (FPRAS). Such algorithms are 
required to provide an e-approximation with probability at least 3/4; this probability 
of success can be increased significantly (e.g., to 1 — 1/n or even 1 — 1/2") by repeating 
the algorithm a small number of times [?] . 

Deterministic FPASs for nontrivial problems seem to be quite rare. However, 
FPRASs have been given for several HP-complete problems such as counting maximum 
matchings in dense graphs [?], measuring the volume of a convex polytope [?], and 
disjunctive normal form (DNF) counting — estimating the probability that a given 
DNF formula evaluates to true if the variables are made true or false at random [?]. 
In a plenary talk, Kannan [?] raised the problem of network reliability as one of the 
foremost remaining open problems needing an approximation scheme. 

1.2. Our Results. In this paper, we provide an FPRAS for the all-terminal net- 
work reliability problem. Given a failure probability p for the edges, our algorithm, 
in time polynomial in n and 1/e, returns a number P that estimates the probability 
FAIL(p) that the graph becomes disconnected. With high probability, 1 P is in the 
range (l±e)FAIL(p). The algorithm is Monte Carlo, meaning that the approximation 
is correct with high probability but that it is not possible to verify its correctness. It 
generalizes to the case where the edge failure probabilities are different, to comput- 
ing the probability the graph is not /c-connected (for any fixed k), and to the more 
general problem of approximating the Tutte Polynomial for a large family of graphs. 
It can also estimate the probability that an Eulerian directed graph remains strongly 
connected under edge failures. Our algorithm is easy to implement and appears likely 
to have satisfactory time bounds in practice [?, ?]. 

Some care must be taken with the notion of approximation because approxima- 
tions are measured by relative error. We therefore get different results depending 
on whether we discuss the failure probability FAIL(p) to the reliability (probability 
of remaining connected) REL(p) = 1 — FAIL(p). Consider a graph with a very low 
failure probability, say e. In such a graph, approximating REL(p) by 1 gives a (1 + e)- 
approximation to the reliability, but approximating the failure probability by gives 
a very poor (infinite) approximation ratio for FAIL(p). Thus, the failure probability 
is the harder quantity to approximate well. On the other hand, in a very unreli- 
able graph, FAIL(p) becomes easy to approximate (by 1) while REL(p) becomes the 
challenging quantity. Our algorithm is an FPRAS for FAIL(p). This means that in 
extremely unreliable graphs, it cannot approximate REL(p). However, it does solve 
the harder approximation problem on reliable graphs, which are clearly the ones likely 
to be encountered in practice. 

The basic approach of our FPRAS is to consider two cases. When FAIL(p) is 
large, it can be estimated via direct Monte Carlo simulation of random edge failures. 
We thus focus on the case of small FAIL(p). Note that a graph becomes disconnected 
when all edges in some cut fail (a cut is a partition of the vertices into two groups; its 
edges are the ones with one endpoint in each group). The more edges cross a cut, the 
less likely it is that they will all fail simultaneously. We show that for small FAIL(p), 

1 The phrase with high probability means that the probability it does not happen can be made 
0(n~ d ) for any desired constant d by suitable choice of other constants (typically hidden in the 
asymptotic notation). 
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only the smallest graph cuts have any significant chance of failing. We show that 
there is only a polynomial number of such cuts, and that they can be enumerated 
in polynomial time. We then use a DNF counting algorithm [?] to estimate the 
probability that one of these explicitly enumerated cuts fails, and take this estimate 
as an estimate of the overall graph failure probability. 

After presenting our basic FPRAS for FAIL(p) in Section 2, we present several 
extensions of it, all relying on our observation regarding the number of small cuts a 
graph can have. In Section 3, we give FPRASs for the network failure probability 
when every edge has a different failure probability, for the probability that an Eulerian 
directed graph fails to be strongly connected under random edge failures, and for 
the probability that two particular "weakly connected" vertices are disconnected by 
random edge failures. In Section 4, we give an FPRAS for the probability that a 
graph partitions into more than r pieces for any fixed r. In Section 5, we give two 
deterministic algorithms for all-terminal reliability: a simple heuristic that provably 
gives good approximations on certain inputs and a deterministic FPAS that applies 
to a somewhat broader class of problems. In Section 6, we show that our techniques 
give an FPRAS for the Tutte Polynomial on almost all graphs. 

1.3. Related Work. Previous work gave algorithms for estimating FAIL(p) in 
certain special cases. Karp and Luby [?] showed how to estimate FAIL(p) in n-vertex 
planar graphs when the expected number of edge failures is O(logn). Alon, Frieze, 
and Welsh [?] showed how to estimate it when the input graph is sufficiently dense 
(with minimum degree O(n)). Other special case solutions are discussed in Colbourn's 
survey [?] . Lomonosov [?] independently derived some of the results presented here. 

A crucial step in our algorithm is the enumeration of minimum and near-minimum 
cuts. Dinitz et al. [?] showed how to enumerate (and represent) all minimum cuts. 
Vazirani and Yannakakis [?] showed how to enumerate near minimum cuts. Karger 
and Stein [?] gave faster cut enumeration algorithms as well as bounds on the number 
of cuts that we will use heavily. 

A preliminary version of this work appeared in [?] . The author's thesis [?] dis- 
cusses reliability estimation in the context of a general approach to random sampling 
in optimization problems involving cuts. In particular, this reliability work relies on 
some new theorems bounding the number of small cuts in graphs; these theorems 
have led to other results on applications of random sampling to graph optimization 
problems [?, ?, ?]. 

2. The Basic FPRAS. In this section, we present an FPRAS for FAIL(p). We 
use two methods, depending on the value of FAIL(p). 

When FAIL(p) is large, we estimate it in polynomial time by direct Monte Carlo 
simulation of edge failures. That is, we randomly fail edges and check whether the 
graph remains connected. Since FAIL(p) is large, a small number of simulations 
(roughly l/FAIL(p)) gives enough data to estimate it well. 

When FAIL(p) is small, we resort to cut enumeration to estimate it. Observe 
that a graph becomes disconnected precisely when all of the edges in some cut of the 
graph fail. By a cut we mean a partition of the graph vertices into two groups. The 
cut edges are those with one endpoint in each group (we also refer to these edges as 
the ones crossing the cut). The value of the cut is the number of edges crossing the 
cut. 

We show that when FAIL(p) is small, only small cuts of G have any significant 
chance of failing. We observe that there is only a polynomial number of such cuts that 
can be found in polynomial time. We therefore estimate FAIL(p) by enumerating the 
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polynomial-size set of small cuts of G and then estimating the probability that one of 
them fails. 

If each edge fails with probability p, then the probability that a fc-edge cut fails is 
p k . Thus, the smaller a cut, the more likely it is to fail. It is therefore natural to focus 
attention on the small graph cuts. Throughout this paper, we assume that our graph 
has minimum cut value c — that is, that the smallest cut in the graph has exactly c 
edges. Such a graph has a probability of at least p c of becoming disconnected — namely, 
if the minimum cut fails. That is: 

Fact 2.1. // each edge of a graph with minimum cut c fails independently with 
probability p, then the probability that the graph becomes disconnected is at least p c . 

Clearly, the probability a cut fails decreases exponentially with the number of 
edges in the cut. This would suggest that a graph is most likely to fail at its small 
cuts. We formalize this intuition. 

Definition 2.2. An a-minimum cut is a cut with value at most a times the 
minimum cut value. 

Below, we show how to choose between the two approaches just discussed. If 
FAIL(p) >p c > n-* then, as we show in Section 2.1, we can estimate it via Monte 
Carlo simulation. This works because 0(l/FAIL(p)) = 0(n 4 ) experiments give us 
enough data to deduce a good estimate (0(f) denotes (9(/logn)). On the other 
hand, when p c < n~ 4 , we know that a given a- minimum cut fails with probability 
pne _ n -4a^ yy e s j 10w m Section 2.2 that there are at most n 2a a-minimum cuts. It 
follows that the probability that any a-minimum cut fails is less than n~ 2a — that is, 
exponentially decreasing with a. Thus, for a relatively small a, the probability that 
a greater than a-minimum cut fails is negligible. Thus (as we show in Section 2.3) 
we can approximate FAIL(p) by approximating the probability that some less than 
a-minimum cut fails. Our FPRAS (in Section 2.4) is based on enumerating these 
small cuts and determining the probability that one of them fails. 

2.1. Monte Carlo Simulation. The most obvious way to estimate FAIL(p) is 
through Monte Carlo simulations. Given the failure probability p for each edge, we 
can "simulate" edge failures by flipping an appropriately biased random coin for each 
edge. We can then test whether the resulting network is connected. If we do this 
many times, then the fraction of trials in which the network becomes disconnected 
should intuitively provide a good estimate of FAIL (p). Karp and Luby [?] investigated 
this idea formally, and observed (a generalization of) the following. 

Theorem 2.3. Performing 0((logn)/(e 2 FAIL(p))) trials will give an estimate 
for FAIL(p) accurate to within lie with high probability. 

Corollary 2.4. J/ FAIL (p) > p c > n~ 4 , then FAIL(p) can be estimated to 
within (1 + e) in 0(mn / e 2 ) time using Monte Carlo simulation. 

The criterion that FAIL(p) not be too small can of course be replaced by a con- 
dition that implies it. For example, Alon, Frieze, and Welsh [?] showed that for any 
constant p, there is an FPRAS for network reliability in dense graphs (those with min- 
imum degree il(n)). The reason is that as n grows and p remains constant, FAIL(p) 
is bounded below by a constant on dense graphs and can therefore be estimated in 
0(n 2 / e 2 ) time by direct Monte Carlo simulation. 

The flaw of the simulation approach is that it is too slow for small values of 
FAIL(p), namely those less than 1 over a polynomial in n. It is upon this situation that 
we focus our attention for the remainder of this section. In this huge number 

of standard simulations would have to be run before we encountered a sufficiently 
large number of failures to estimate FAIL(p) (note that we expect to run l/FAIL(p) 
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trials before seeing any failures) . Karp and Luby [?] tackled this situation for various 
problems, and showed that it could be handled in some cases by biasing the simulation 
such that occurrences of the event being estimated became more likely. One of their 
results was an FPRAS for network reliability in planar graphs, under the assumption 
that the failure probability p of edges is 0((logn)/n) so that the expected number 
of edges failing is O(logn). Their algorithm is more intricate than straightforward 
simulation, and, like ours, relies on identifying a small collection of "important cuts" 
on which to concentrate. 

Another problem where direct Monte Carlo simulation breaks down, and to which 
Karp and Luby [?], found a solution, is that of DNF counting: given a boolean 
formula in disjunctive normal form, and given for each variable a probability that 
it is set to true, estimate the probability that the entire formula evaluates to true. 
Like estimating FAIL(p), this problem is hard when the probability being estimated 
is very small. Karp and Luby [?] developed an FPRAS for DNF counting using a 
biased Monte Carlo simulation. The running time was later improved by Karp, Luby, 
and Madras [?] to yield the following: 

Theorem 2.5. There is an FPRAS for the DNF counting problem that runs in 
0(s/e 2 ) time on a size s formula. 

We will use the DNF counting algorithm as a subroutine in our FPRAS. 

2.2. Counting Near-minimum Cuts. We now turn to the case of p c small. 
We show that in this case, only the smallest graph cuts have any significant chance 
of failure. While it is obvious that cuts with fewer edges are more likely to fail, one 
might think that there are so many large cuts that overall they are more likely to fail 
than the small cuts. However, the following proposition lets us bound the number of 
large cuts and show this is not the case. 

Theorem 2.6. An undirected graph has less than n 2a a-minimum cuts. 
Remark: Vazirani and Yannakakis [?] gave an incomparable bound on the number 
of small cuts by rank rather than by value. □ 

In this section, we sketch a proof of Theorem 2.6. A detailed proof of the theorem 
can be found in [?] and an alternative proof in [?]. Here, we sketch enough detail to 
allow for some of the extensions we will need later. We prove the theorem only for 
unweighted multigraphs (graphs with parallel edges between the same endpoints); the 
theorem follows for weighted graphs if we replace any weight w edge by a set of w 
unweighted parallel edges. 

2.2.1. Contraction. The proof of the theorem is based on the idea of edge 
contraction. Given a graph G = (V, W), and an edge (v,w), we define a contracted 
graph G/(v, w) with vertex set V = VU {u} — {v, w} for some new vertex u and edge 
set 

E' = E — {(v, w)} U {(u, x) | (v, x) e E or (w, x) G E}. 

In other words, in the contracted graph, vertices v and w are replaced by a single 
vertex u, and all edges originally incident on v or w are replaced by edges incident 
on u. We also remove self-loops formed by edges parallel to the contracted edge since 
they cross no cut in the contracted graph. 

Fact 2.7. There is a one-to-one correspondence between cuts in G/e and cuts in 
G that e does not cross. Corresponding cuts have the same value. 

Proof. Consider a partition (A, B) of the vertices of G/(v,w). The vertex u 
corresponding to contracted edge (v, w) is on one side or the other. Replacing u by v 
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and w gives a partition of the vertices of G. The same edges cross the corresponding 
partitions. □ 

2.2.2. The Contraction Algorithm. We now use repeated edge contraction in 
an algorithm that selects a cut from G. Consider the following Contraction Algorithm. 
While G has more than 2 vertices, choose an edge e uniformly at random and set 
G <— G/e. When the algorithm terminates, we are left with a two- vertex graph that 
has a unique cut. A transitive application of Fact 2.7 shows that this cut corresponds 
to a unique cut in our original graph; we will say this cut is chosen by the Contraction 
Algorithm. We show that any particular minimum cut is chosen with probability at 
least n~ 2 . Since the choices of different cuts are disjoint events whose probabilities 
add up to one, it will follow that there are at most n 2 minimum cuts. We then 
generalize this argument to a-minimum cuts. 

Lemma 2.8. The Contraction Algorithm chooses any particular minimum cut 
with probability at least n~ 2 . 

Proof. Each time we contract an edge, we reduce the number of vertices in the 
graph by one. Consider the stage in which the graph has r vertices. Suppose G has 
minimum cut c. It must have minimum degree c, and thus at least rc/2 edges. Our 
particular minimum cut has c edges. Thus a randomly chosen edge is in the minimum 
cut with probability at most c/(rc/2) = 2/r. The probability that we never contract 
a minimum cut edge through all n — 2 contractions is thus at least 

= (n-2)(n-3)---(3)(2)(l) 

n(n-l)(n-2) (4) (3) 

2 

n(n — 1) 

<r 

>n- 2 . 

□ 

2.2.3. Proof of Theorem 2.6. We can extend the approach above to prove 
Theorem 2.6. We slightly modify the Contraction Algorithm and lower bound the 
probability it chooses a particular a-minimum cut. With r vertices remaining, the 
probability we choose an edge from our particular a-minimum cut is at most 2a/ r. 
Let k = \2a]. Suppose we perform random contractions until we have a k- vertex 
graph. In this graph, choose a vertex partition uniformly at random, so that each of 
its cuts is chosen with probability 2 1 ~ fc . It follows that a particular a- minimum cut 
is chosen with probability 
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(n-2a)\ k\, 
(fc- 2a)! nT 
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Note that for a not a half-integer, we are making use of generalized binomial co- 
efficients which may have non-integral arguments. These are discussed in [?, Sec- 
tions 1.2.5-6] (cf. Exercise 1.2.6.45). There, the Gamma function is introduced to 
extend factorials to real numbers such that a\ = a(a — 1)! for all real a > 0. Many 
standard binomial identities extend to generalized binomial coefficients, including the 
facts that ( "J < n 2a /(2a)\ and 2 2 "- 1 < (2a)! for a > 1. 

Remark: The Contraction Algorithm described above is used only to count cuts. 
An efficient implementation given in [?] can be used to find all a-minimum cuts in 
0(n 2a ) time. We use this algorithm in our FPRAS. □ 

2.3. Cut Failure Bounds. Using the cut counting theorem just given, we show 
that large cuts do not contribute significantly to a graph's failure probability. Consider 
Theorem 2.6. Taking a = 1, it follows from the union bound that the probability that 
some minimum cut fails is at most n 2 p c . We now show that the probability that any 
cut fails is only a little bit larger. 

Theorem 2.9. Suppose a graph has minimum cut c and that each edge of the 
graph fails independently with probability p, where p c = n~( 2+s ^ for some <5 > 0. Then 

1. The probability that the given graph disconnects is at most n~ s {1 + 2/(5), and 

2. The probability that a cut of value ac or greater fails in the graph is at most 
n- aS (l + 2/5). 

Remark: We conjecture that a probability bound of n~ aS can be proven (eliminating 
the (1 + 2/(5) term). □ 

Proof. We prove Part 1 and then note the small change needed to prove Part 2. 
For the graph to become disconnected, all the edges in some cut must fail. We 
therefore bound the failure probability by summing the probabilities that each cut 
fails. Let r be the number of cuts in the graph, and let Ci, . . . , c r be the values of 
the r cuts in increasing order so that c = c\ < C2 < • • • < c r . Let pk — p Ch be the 
probability that all edges in the k th cut fail. Then the probability that the graph 
disconnects is at most ^Pk, which we proceed to bound from above. 

We proceed in two steps. First, consider the first n 2 cuts in the ordering (they 
might not be minimum cuts). Each of them has Ck > c and thus has pk < n~( 2+5 \ 
so that 

k<n 2 

Next, consider the remaining larger cuts. According to Theorem 2.6, there are less 
than n 2a cuts of value at most ac. Since we have numbered the cuts in increasing 
order, this means that c„2 Q > ac. In other words, writing k = n 2a , 

Ink 
2 Inn 

and thus 

Pk < (p c )^ 

= („-(2+*))^£ 
= k -(l+S/2)_ 
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It follows that 



k>n 2 k>n 2 
in 2 

< 2n~ l5 / M- 

Summing the bounds for the first n 2 and for the remaining cuts gives a total of 
n~ s + 2n~ s /S, as claimed. 

The proof of Part 2 is the same, except that we sum only over those cuts of value 
at least ac. □ 

Remark: A slightly stronger version of Part 1 was first proved by Lomonosov and 
Polesskii [?] using different techniques that identified the cycle as the most unreliable 
graph for a given c and n. We sketch their result, which we need for a different 
purpose, in Section 4.3.2. However, Part 2 is necessary for the FPRAS and was not 
previously known. □ 

2.4. An Approximation Algorithm. Our proof that only small cuts matter 
leads immediately to an FPRAS. First we outline our solution. Given that FAIL(p) < 
n~ 4 , Theorem 2.9 shows that the probability that a cut of value much larger than 
c fails is negligible, so we need only determine the probability that a cut of value 
near c fails. We do this as follows. First, we enumerate the (polynomial size) set of 
near-minimum cuts that matter. From this set we generate a polynomial size boolean 
expression (with a variable for each edge, true if the edge has failed) that is true if any 
of our near-minimum cuts has failed. We then need to determine the probability that 
this boolean expression is true; this can be done using the DNF counting techniques 
of Karp, Luby, and Madras [?, ?]. Details are given in the following theorem. 

Theorem 2.10. When FAIL(p) < n~ 4 , there is a (Monte Carlo) FPRAS for 
estimating FAIL(p) running in (J(mn A / 'e 3 ) time. 

Proof. Under the assumption, the probability that a particular minimum cut fails 
is p c < FAIL(p) < n~ 4 . We show there is a constant a for which the probability 
that any cut of value greater than ac fails is at most eFAIL(p). This proves that 
to approximate to the desired accuracy we need only determine the probability that 
some cut of value less than ac fails. It remains to determine a. Write p c = n~( 2+t5 ); 
by hypothesis 5 > 2. Thus by Theorem 2.9, the probability that a cut larger than ac 
fails is at most 2n~ Sa . On the other hand, we know that 

n -(2+s) = p c < FAIL(p), 

so it suffices to find an a for which 2n~ Sa < en~( 2+s \ Solving shows that a = 
1 + 2/5 — (ln(e/2))/51nn < 2 — ln(e/2)/2 Inn suffices and that we therefore need only 
examine the smallest n 2a = 0(n 4 /e) cuts. 

We can enumerate these cuts in 0(n 2a log 3 n) time using certain randomized 
algorithms [?, ?] (a somewhat slower deterministic algorithm can be found in [?]). 
Suppose we assign a boolean variable x e to each edge e; x e is true if edge e fails and 
false otherwise. Therefore, the x e are independent and true with probability p. Let 
Ei be the set of edges in the i th small cut. Since the i th cut fails if and only if all edges 
in it fail, the event of the i th small cut failing can be written as Fj = A ee EiX e - Then 
the event of some small cut failing can be written as F = VjF,. We wish to know the 
probability that F is true. Note that F is a formula in disjunctive normal form. The 
size of the formula is equal to the number of clauses (n 2a ) times the number of variables 
per clause (at most ac), namely 0(cn 2a ). The FPRAS of Karp, Luby, and Madras [?] 
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estimates the truth probability of this formula, and thus the failure probability of the 
small cuts, to within (1 ± e) in 0(cn 2a / e 2 ) — 0(cn 4 /e 3 ) = 0(mn A /e 3 ) time. 

We are therefore able to estimate to within (1 ± e) the value of a probability (the 
probability that some a-minimum cut fails) that is within (1 ± e) of the probability 
of the event we really care about (the probability that some cut fails). This gives us 
an overall estimate accurate to within (1 ± e) 2 m (1 ± 2e). □ 

Corollary 2.11. There is an FPRAS for FAIL(p) running in 6(mn 4 /e 3 ) time. 

Proof. Suppose we wish to estimate the failure probability to within a (lie) 
ratio. If FAIL(p) > n~ 4 , then we estimate it in 0(mn 4 /e 2 ) time by direct Monte 
Carlo simulation as in Corollary 2.4. Otherwise, we can run the 0(mn 4 /e 3 ) time 
algorithm of Theorem 2.10. □ 

If the graph is sparse (with 0(n) edges) and the minimum cut is 0(1) (both these 
conditions apply to, e.g., planar graphs) then the time for a Monte Carlo trial is 0(n), 
while the size of the formula for the DNF counting step above is 0(n 2a ). So if we use 
a different FAIL(p) threshold for deciding which algorithm to use, we can improve the 
running time bound to 0(n 3 8 /e 2 ). 

While this time bound is still rather poor, experiments have suggested that per- 
formance in practice is significantly better — typically 0(n 3 ) on sparse graphs [?]. 

3. Extensions. We now discuss several extensions of our basic FPRAS. In this 
section, we will consider many cases in which it is sufficient to consider the probability 
that an a-minimum cut fails for some a = 0(1 — log e/ log n) (as in the previous 
section) that is understood in context but not worth deriving explicitly. We will refer 
to these a-minimum cuts as the weak cuts of the graph. 

3.1. Varying Failure Probabilities. The analysis and algorithm given above 
extend to the case where each edge e has its own failure probability p e . To extend the 
analysis, we transform a graph with varying edge failure probabilities into one with 
identical failure probabilities. Given the graph G with specified edge failure probabil- 
ities, we build a new graph H all of whose edges have the same failure probability p, 
but that has the same failure probability as G. Choose a small parameter 9. Replace 
an edge e of failure probability p e by a "bundle" of k e parallel edges, each with the 
same endpoints as e but with failure probability 1 — 9, where 

k e = r-(lnp e )/01 . 

This bundle of edges keeps its endpoints connected unless all the edges in the bundle 
fail; this happens with probability 

(1 - 6») r ~ (lnPe)/el . 

As 9 — > 0, this failure probability converges to p e . Therefore, the reliability of H 
converges as 9 — > to the reliability of G. Thus, to determine the failure probability 
of G, we need only determine the failure probability of H in the limit as 9 — > 0. 

Since H has all edge failure probabilities the same, our Section 2 analysis of 
network reliability applies to H . In particular, we know that it suffices to enumerate 
the weak cuts of H and then determine the probability that one of them fails. To 
implement this idea, note that changing the parameter 9 scales the values of cuts in 
H without changing their relative values (modulo a negligible rounding error). We 
therefore build a weighted graph F by taking graph G and giving a weight (lnl/p e ) 
to edge e. The weak cuts in F correspond to the weak cuts in H. We find these weak 
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cuts in F using the Contraction Algorithm (which works for weighted graphs [?]) as 
before. 

Given the weak cuts in H, we need to determine the limiting probability that one 
of them fails as 9 — > 0. We have already argued that as 9 — ► 0, the probability a cut 
in H fails converges to the probability that the corresponding cut in G fails. Thus we 
actually want to determine the probability that one of a given set of cuts in G fails. 
We do this as before: we build a boolean formula with variables for the edges of G 
and with a clause for each weak cut that is true if all the edges of the cut fail. The 
only change is that variable x e is set to true with probability p e . The algorithm of [?] 
works with these varying truth probabilities and computes the desired quantity. This 
gives: 

Theorem 3.1. There is an FPRAS for the all terminal network reliability prob- 
lem with varying edge failure probabilities. 

One might be concerned by the use of logarithms to compute edge weights. How- 
ever, it is easy to see that in fact approximate logarithms suffice for the purpose of 
enumerating small cuts. If we approximate each logarithm to within relative error .1, 
then every cn-minimum cut in F remains an lla/9-minimum cut in the approximation 
to F. Thus we can enumerate a slightly larger set of near-minimum cuts in order to 
find the weak cuts. Once we find the weak cuts, we use the original p e values in the 
DNF counting algorithm. 

In the case of varying failure probabilities, we cannot bound the number of edges 
in any particular weak cut by a quantity less than m (a weak cut may have m — n 
edges with large failure probabilities). Thus the size of the DNF formula, and thus 
the running time of the DNF counting algorithm, may be as large as mn 2a w mn 4 /e. 

All the other extensions described in this paper can also be modified to handle 
varying failure probabilities. But for simplicity, we focus on the uniform case. 

3.2. Multiterminal Reliability. The multiterminal reliability problem is a 
generalization of the all-terminal reliability problem. Instead of asking whether the 
graph becomes disconnected, we consider a subset K of the vertices and ask if some 
pair of them becomes disconnected. If some pair of vertices in K is separated by a 
cut of value 0(c), then we can use the same theorem on the exponential decay of cut 
failure probabilities to prove that we only need to examine the small cuts in the graph 
to determine whether some pair of vertices in K becomes disconnected. 

Lemma 3.2. If some pair of vertices in K is separated by a cut of value 0(c), 
then there is an FPRAS for the multiterminal reliability problem with source vertices 
K. 

Proof. We focus on the case of uniform failure probability p; the generalization 
to arbitrary failure probabilities is as before. Suppose a cut of value (3c separates 
vertices in K. Then the probability that K gets disconnected when edges fail with 
probability p is at least p l3c . lip c > n~ 4 , thenp^ c > n~ 413 = n~°^ and we use Monte 
Carlo simulation as before to estimate the failure probability. If p c < n~ A , then by 
Theorem 2.9, the probability that a cut of value exceeding etc fails is 0(n~ 2a ). Thus, 
choosing a such that n~ 2a < ep /3c , we can enumerate the weak cuts and apply DNF 
counting. □ 

3.3. fc-Connectivity. Just as we estimated the probability that the graph fails 
to be connected, we can estimate the probability that it fails to be fc-edge connected for 
any constant k. Note that the graph fails to be fc-edge connected only if some cut has 
less than k of its edges survive. The probability of this event decays exponentially with 
the value of the cut, allowing us to prove (as with Theorem 2.9) that if the probability 

10 



that fewer than k edges in a minimum cut survive is 0(n~( 2+d )), then the probability 
that fewer than k edges survive in a non-weak cut is negligible. Thus, if direct 
Monte Carlo simulation is not applicable, we need only determine the probability 
that some weak cut keeps less than k of its edges. But this is another DNF counting 
problem. For any particular weak cut containing C < m edges, we enumerate all 
(c-k+i) = OiC^ 1 ) = 0(m k - 1 ) sets of C - k + 1 edges, and for each add a DNF 
clause that is true if all the given edges fail. 

In fact, one can also adapt the algorithm of [?] to determine the probability that 
all but k — 1 variables in some clause of a DNF formula become true; thus we can 
continue to work with the 0(mn 4 /e) size formula we used before. 

Corollary 3.3. For any constant k, there is an FPRAS for the probability that 
a graph with edge failure probabilities fails to be k-edge connected. 

3.4. Eulerian Directed Graphs. A natural generalization of the all-terminal 
reliability problem to directed graphs is to ask for the probability that a directed 
graph with random edge failures remains strongly connected. A directed graph fails 
to be strongly connected precisely when all the edges in some directed cut fail. In 
general, the techniques of this paper cannot be applied to directed graphs — the main 
reason being that a directed graph can have exponentially many minimum directed 
cuts. 

We can, however, handle one special case. In an Eulerian directed graph G on 
vertex set V , the number of edges crossing from any vertex set A to V — A is equal 
to the number of edges crossing from V — A to A. Thus if we construct an undirected 
graph H by removing the directions from the edges of G, we know that any (directed) 
cut in G has value equal to half that of the corresponding (undirected) cut in H. It 
follows that the a-minimum directed cuts of G correspond to a-minimum undirected 
cuts of H. Therefore, there are at most 2n 2a a-minimum directed cuts in G that 
can be enumerated by enumerating the a-minimum cuts of H (the factor of 2 arises 
from considering both directions for each cut). As in the undirected case, if the 
directed failure probability is less than n -4 , an analogue of Theorem 2.9 immediately 
follows, showing that only weak directed cuts are likely to fail. It therefore suffices to 
enumerate a polynomial number of weak directed cuts to estimate the directed failure 
probability. 

Corollary 3.4. There is an FPRAS for the probability that a directed Eulerian 
graph fails to remain strongly connected under random edges failures. 

Corollary 3.5. For any constant k there is an FPRAS for the probability that 
a directed Eulerian graph fails to have directed connectivity k under random edges 
failures. 

3.5. Random Orientations. In a similar fashion, we can estimate the proba- 
bility that, if we orient each edge of the graph randomly, the graph fails to be strongly 
connected. For each cut, we make a DNF formula with two clauses, one of which is 
true if all edges point "left" and the other if all edges point "right." (This observation 
is due to Alan Frieze.) This problem can also be phrased as estimating the number 
of non-strongly connected orientations of an undirected graph; in this form, it is re- 
lated to the Tutte Polynomial discussed in Section 6. Similarly, we can estimate the 
probability that random orientations fail to produce a fc-connected directed graph. 

4. Partition into r Components. The quantity FAIL(p) is an estimate of 
the probability that the graph partitions into more than one connected component. 
We can similarly estimate the probability that the graph partitions into r or more 
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components for any constant r. Besides its intrinsic interest, the analysis of this 
problem will be important in our study of some heuristics and derandomizations in 
Section 5 and the Tutte Polynomial in Section 6. 

We first note that a graph partitions into r or more components only if an r- 
way cut — the set of edges with endpoints in different components of an r-way vertex 
partition — loses all its edges. Note that some of the vertex sets of the partition might 
induce disconnected subgraphs, so that the r-way partition might induce more than 
r connected components. However, it certainly does not induce less. Our approach 
to r-way reliability is the same as for the 2-way case: we show that there are few 
small r-way cuts and that estimating the probability one fails suffices to approximate 
the r-way failure probability. As a corollary, we show that the probability of r-way 
partition is much less than that of 2-way partition. 

4.1. Counting Multiway Cuts. We enumerate multiway cuts using the Con- 
traction Algorithm as for 2-way case. Details can be found in [?]. 

Lemma 4.1. In an m-edge unweighted graph the minimum r way cut has value 
at most 2m(r — l)/n. 

Proof. A graph's average degree is 2m/ n. Consider an r-way cut with each of the 
r — 1 vertices of smallest degree as its own singleton component and all the remaining 
vertices as the last component. The value of this cut is at most the sum of the 
singleton vertex degrees, which is at most r — 1 times the average degree. □ 

Corollary 4.2. There are at most {2(^-1)) minimum r-way cuts. 

Proof. Fix a particular r-way minimum cut and run the Contraction Algorithm 
until we have 2(r — 1) vertices. By the previous lemma, the probability that we pick 
an edge of our fixed cut when k vertices remain is at most ^ L ^ L - Thus the probability 
that our fixed minimum r-way cut is chosen is 



n 

fe=2r-l 



1 2(r - 1) 



which is analyzed exactly as in the proof of Theorem 2.6, substituting r — 1 for a. □ 
Corollary 4.3. For arbitrary a > 1, there are at most (rn) 2 "^ -1 ) a-minimum 
r-way cuts that can be enumerated in 0((rn) 2a ( r ~ 1 ' 1 ) time. 

Proof. First run the Contraction Algorithm until the number of vertices remaining 
is \2a(r — 1)] . At this point, choose a random r-way partition of what remains. There 
are at most r 2a ( r - 1 ) suc h partitions. 

The time bound follows from the analysis of the Recursive Contraction Algo- 
rithm [?]. □ 

Remark: We conjecture that in fact the correct bound is 0(n ar ) a-minimum r-way 
cuts. Section 4.3.2 shows this is true for a = 1. Proving it for general a would slightly 
improve our exponents in the following sections. D 

4.2. An Approximation Algorithm. Our enumeration of multiway cuts al- 
lows an analysis and reduction to DNF counting exactly analogous to the one per- 
formed for FAIL(p). 

Corollary 4.4. Suppose a graph has r-way minimum cut value c r and that each 
edge fails with probability p, where p Cr = (rn)~^ 2+s ^ r ~ 1 ^ for some constant 5 > 0. 
Then the probability that an a-minimum r-way cut fails is at most (rn)~ aS ^ r ~ 1 \l + 
2/5) 

Proof. Exactly as for Theorem 2.9, substituting (rn)( r ^ (drawn from Corol- 
lary 4.3) for n everywhere. □ 
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Corollary 4.5. There is an algorithm for e- approximating the probability that 
a graph partitions into r or more components, running in 0(m(rn) 4 ^ r ~ 1 ^ /e 3 ) time. 
The algorithm is an FPRAS with running time 0(mn 4 ' r_1 ' /e 3 ) for any fixed r. 

Proof. Exactly as for the two-way cut case, with (ni)' r_1 ' replacing n everywhere. 
Let c r be the r-way minimum cut value and let 6 be defined by p Cr = (rn) _ ' 2+5 ^ r_1 '. 
If p Cr > (ra) _4 ' r ~ 1 ', estimate the partition probability via Monte Carlo simulation. 
Otherwise, it follows as in the 2-way cut case that for the same constant a as we chose 
there, the probability that a greater than a-minimum r-way cut fails is less than ep Cr . 
Thus to estimate the partition probability it suffices to enumerate (in 0((rn) 4 ( r_1 )/e) 
time) the set of a-minimum cuts and perform DNF counting. □ 

One might wish to compute the probability that a graph partitions into exactly 
r components, but it is not clear that this can be done. In particular, computing 
REL(p) can be reduced to this problem (for any r) by adding r — 1 isolated vertices. 
There is presently no known FPRAS for REL(p). 

4.3. Comparison to 2-way Cuts. For Sections 5 and 6, we need to show that 
the probability of partition into r components is much less than that of partition into 
2 components. We give two proofs, the first simpler but with a slightly weaker bound. 
The following sections can use the weaker analysis at the cost of worse exponents. 
In this section, the term "cut" refers exclusively to two-way cuts unless we explicitly 
modify it. 

4.3.1. A simple argument. Lemma 4.6. If p c = n~( 2+5 \ then the probability 
that an r-way cut fails is at most n~ 5r / i (l + 2/5). 

Proof. We show that any r-way cut contains the edges of a (2-way) cut of value 
rc/4. Thus, if an r-way cut fails then an (r/4)-minimum cut fails. The probability 
that this happens has been upper-bounded by Theorem 2.9. 

To show the claim, consider an r-way cut. Contract each component of the r-way 
partition to a single vertex, yielding an r- vertex graph G' . All edges in this graph 
correspond to edges of the r-way cut. Every cut in G' corresponds to a cut of the 
same value in the original graph, so it suffices to show that G' has a 2-way cut of value 
rc/4. To see this, note that every vertex in G' has degree at least c, so the number 
of edges in G' is at least rc/2. Consider a random cut of G", generated by assigning 
each vertex randomly to one side or the other. Each edge has a 1/2 chance of being 
cut by this partition, so the expected value of this cut is at least rc/4. It follows that 
G' has a cut of value at least rc/4 that corresponds to a cut of value at least rc/4 in 
the original graph. □ 

4.3.2. A better argument. We can get a slightly better bound on the proba- 
bility that a graph partitions into r components via a small variation on an argument 
due to Lomonosov and Polesskii [?, ?, ?]. The better bound improves some of our 
exponents. Their proof uses techniques somewhat different from the remainder of the 
paper and can safely be skipped. 

Lemma 4.7. Let FAlL r (G,p) denote the probability that G partitions into r 
or more connected components when each edge fails with probability p. Let G have 
minimum cut c for some even c. Let C n be a cycle with c/2 edges between adjacent 
vertices. Then for any r, FAIL r (G,p) < FALL r (C n ,p). 

COROLLARY 4.8. For any graph G with minimum cut c, if edges fail with 
probability p where p c = n~^ 2+5 \ then the probability the failed graph has r or more 
connected components is less than n~ 5r / 2 . 
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Remark: Note that for r — 2, the above result gives a slightly stronger bound on 
FAIL(p) than we are able to get in Theorem 2.9. Unfortunately, this argument does 
not appear to extend to proving the bound we need on the probability that a greater 
than a-minimum r-way cut fails. □ 

Proof of Corollary 4.8: Thanks to Lemma 4.7, it suffices to prove this claim for 
the case of G a cycle G„ with (c/2)-edge "bundles" between adjacent vertices. The 
number of components into which C n is partitioned is equal to the number of bundles 
which fail, so we need only bound the probability that r or more bundles fail. The 
probability that a single bundle fails is p c / 2 = n~( 1+<5 / 2 ) , so the probability r particular 
bundles fail is n~ r ( 1+s / 2 \ There are (™) < n r sets of exactly r bundles. It follows 
that the probability r or more bundles fail is less than n r n~ r ( 1+<5 / 2 ) = n~ rS / 2 . □ 
Proof of Lemma 4.7: Consider the following time-evolving version of the Contrac- 
tion Algorithm on a connected graph G. Each edge of G is given an arrival time 
chosen independently from the exponential distribution with mean 1. Each time an 
edge arrives, we contract its endpoints if they have not already been contracted. This 
gives rise to a sequence of graphs G = G„, G„_i, ... , G\ where G r has r vertices. Let 
G[t] be the graph that exists at time t. Thus initially G[0] = G n and eventually G[oo] 
has one vertex since all edges have arrived. We draw a correspondence between this 
model and our edge failure model as follows: at time t, the failed edges are those which 
have not yet arrived. It follows that each vertex in G[t] corresponds to a connected 
component of G when each edge has failed (to arrive) independently with probability 
e-*. 

We consider the random variable T r (G) defined as the time at which the edge 
that contracts G r to G r _i arrives. We show that T r (C n ) stochastically dominates 
T r {G) for every r — that is, 

Pr[T r (G) >t] <Pi[T r (C n ) >t] 

(See Motwani and Raghavan [?] for additional discussion of this definition). Assuming 
this is true, we can prove our result as follows: 

Pr[G[i] has r or fewer components] = Pr [T r (G) < t] 

> Pr[T r (G„) < t] 

= Pr[G„[i] has r or fewer components] 

To prove stochastic domination, let t r (G) = T r _i(G) — T r (G) denote the length 
of time for which G r exists before being contracted to G r _i. Clearly, t r (G) is just the 
time it takes for an edge to arrive that has endpoints in different connected compo- 
nents of G r . Thanks to the memoryless nature of the exponential distribution, the t r 
are mutually independent (this will be justified more carefully later). It follows that 
TAG) = Er'=rM<3)- Similarly, T r (C n ) = £" =r t r /(C n ). We will show that t r {C n ) 
stochastically dominates t r (G) for every r. The fact that T r (C n ) stochastically dom- 
inates T r (G) then follows from the fact that when X dominates X' and Y dominates 
Y' and the variables are independent, X + Y dominates X' + Y' . 

To analyze t ri suppose there are m r edges in G r (note m r is a random variable). 
The arrival time of each edge in G r measured from T r (G) is exponentially distributed 
with mean 1. Therefore, the arrival time of the first such edge, namely t r (G), is 
exponentially distributed with mean l/m r . Now note that G r is c-conncctcd, so 
it must have m r > cr/2. It follows that t r (G) is exponentially distributed with 
mean at most 2/cr, meaning that it is stochastically dominated by any exponentially 
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distributed variable with mean 2/cr. On the other hand, when G„ has been reduced to 
r components, it is isomorphic to G r . By the same analysis as for G, we know t r (C n ) 
is exponentially distributed with mean 2/cr, and thus stochastically dominates t r (G). 

Our glib claim that the t r are independent needs some additional justification. 
Technically, we condition on the values G n , ... , G\ of the evolving graph. We show 
that regardless of what values we condition on, T r (C n ) stochastically dominates T r (G | 
G n , . . . ,G\). Since the stochastic domination applies regardless of our conditioning 
event, it follows even if we do not condition. 

Once we have conditioned on the value G r , t r is just the time it takes for an 
edge to arrive that contracts G r to G r _i and is therefore independent of t r > when 
r' 7^ r. But we must ask whether t r still has the right exponential distribution — the 
complicating factor being that we know the first edge to arrive at G r must contract 
G r to a specific G r _i and not some other graph. To see that this does not matter, 
let B be the event that first edge to arrive at G r is one that creates G r _i. Then 

Pr[t r >t\B] = Pr[B | t r > t] Pr[t r > t]/Pr[B] 
= Pr[B] Pr[t r > t]/Pr[B] 
= Pr[*r > t] 

since of course, the time of arrival of the edge the contracts G r has no impact on 
which of the edges of G r is the first to arrive. □ 

5. Heuristics and Deterministic Algorithms. Until now, we have relied on 
the fact that the most likely way for a graph to fail is for some of its near-minimum 
cuts to fail. We now strengthen this argument to observe that most likely, exactly 
one of these near minimum cuts fails. This leads to two additional results. First, 
we show that the sum of the individual small-cut failure probabilities is a reasonable 
approximation to the overall failure probability. This justifies a natural heuristic and 
indicates that in practice one might not want to bother with the DNF counting phase 
of our algorithm. In a more theoretical vein, we also give a deterministic PAS for 
FAIL(p) that applies whenever FAIL(p) < n~( 2+5 \ We prove the following theorems. 

Theorem 5.1. When p c < n~ A (and in particular when FAIL(p) < n~ A ), the 
sum of the weak cuts' failure probabilities is a (1 + o(l)) approximation to FAIL(p). 

Theorem 5.2. When p c < n~( 2+t5 ) for any constant 5 (and in particular when 
FAIL(p) < n~( 2+s ^ ), there is a deterministic PAS for FAIL(p) running in 

(n/e) oxp (°(- los " e » 

time. 

We remark that unlike many PASs whose running times are only polynomial for 
constant e, our PAS has polynomial running time so long as e = n~°^ . But its 
behavior when e is tiny prevents it from being an FPRAS. 

To prove these theorems, we argue as follows. As shown in Section 2, it is sufficient 
to approximate, for the given e, the probability that some a-minimum cut fails, where 

a= 1 + 2/(5- (In e)/S Inn 

Let us write these a-minimum cuts as Gj, i = 1, . . . ,n 2a . Let Fj denote the event 
that cut Gj fails. We can use inclusion exclusion to write the failure probability as 

Pr[UFi] = £ Pr[F n ] - ]T Pr^ n F l2 ] + £ Pr[F H n F l2 n F h ] + ■■■. 

il ii<i2 H<«2<i3 
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Later terms in this summation measure events involving many cut failures. We show 
that when many cuts fail, the graph partitions into many pieces, meaning a multiway 
cut fails. We then argue (using Lemma 4.6 or Corollary 4.8) that this is so unlikely 
that later terms in the sum can be ignored. This immediately yields Theorem 5.1. 

To prove Theorem 5.2, wc show that for any fixed e it is sufficient to consider 
a constant number of terms (summations) on the right hand side in order to get a 
good approximation. Observe that the k th term in the summation can be computed 
deterministically in 0(m(n 2a ) k ) time by evaluating the probability of each of the 
(n 2ka ) intersection events in the sum (each can be evaluated deterministically since it 
is just the probability that all edges in the specified cuts fail). Thus, our running time 
will be polynomial so long as the number of terms we need to evaluate is constant. 

5.1. Inclusion-Exclusion Analysis. As discussed above, our analyses use a 
truncation of the inclusion-exclusion expression for 

Pr[UF,] - ]T Pr[iy - J2 Pr[F tl H F t2 ] + ^ Pr[F n n F l2 R F h ] + ■ ■ ■ . 

il ii<t2 ii<i2<i3 

Suppose we truncate the inclusion-exclusion, leaving out the k th and later terms. 
If k is odd the truncated sum yields a lower bound; if k is even it yields an upper 
bound. We show that this bound is sufficiently tight. We do so by rewriting the 
inclusion-exclusion expression involving particular sets of failed cuts failing as an 
expression based on how many cuts fail. 

Lemma 5.3. Let S u be the event that u or more of the events Fi occur. If the 
inclusion-exclusion expansion is truncated at the k th term, the error introduced is 

u x ' 



Proof. Let T u be the event that exactly u of the events Fi occur. Consider the 
first summation F^ in the inclusion-exclusion expansion. The event that precisely 
the events Fj 1 , . . . , Fj u occur (that is, the event that cuts Cj 1 , Cj k fail but no 
others do) contributes to the u terms Pr[FjJ, . . . ,Pr[FjJ in the sum. It follows that 
each sample point contributing to T u is counted u = (") times in the summation. 
Thus, 

By the same reasoning, 

]>>r[F n nFj= Wf) Pr[T„], 

u ^ ' 
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and so on. It follows that the error introduced by truncation at term k is 



53 Pr^niV-.n^J- ]T Pr[F H n F l2 n ■ ■ ■ F lk+1 ] + ■ ■ ■ 

ii<i2<---<ik ii<i2<---<ik+i 

= E(- 1 ) fc - j E(-) Pr ^i 

j>k u ^ J ' 

u j>k V7/ 
u v ' 

Now recall that S u is the event that u or more of the Fi occur, meaning that Pr[T„] = 
Pr[5 u ] — Pr[5„+i]. So we can rewrite our bound above as 

H(°:!)(Pi'[S.]-Pr[S„ +1 ]) 

* =e(::0^]-i:(::;)^i 

u v 7 it v 7 

=e((::0-(::0)^ 
=e(::;Ki 



This completes the proof. □ 

5.2. A Simple Approximation. Using the above error bound, we can prove 
Theorem 5.1. Let Fi denote the event that the i th near-minimum cut fails. Our 
objective is to estimate Pr[UFj]. Summing the individual cuts' failure probabilities 
corresponds to truncating our inclusion-exclusion sum at the second term, giving (by 
Lemma 5.3) an error of ^2 U>2 S u . We now bound this error by bounding the quantities 

Lemma 5.4. Ifu distinct (2-way) cuts fail then a \\og(u + 1) + l\-way cut jails. 

Proof. Consider a configuration in which u distinct cuts have failed simultane- 
ously. Suppose this induces k connected components. Let us contract each connected 
component in the configuration to a single vertex. Each failed cut in the original graph 
corresponds to a distinct failed cut in the contracted graph. Since the contracted 
graph has k vertices, we know that there are at most 2 fc_1 — 1 ways to partition its 
vertices into two nonempty groups, and thus at most this many cuts. In other words, 
u < 2 k ~ 1 — 1. Now solve for u and observe it must be integral. □ 

Corollary 5.5. Ifp c = n - { - 2 +^ then Y>v[S u ] < n -n°g(«+i)+iW2_ 

Proof. Apply Corollary 4.8 to the previous lemma. □ 

Thus, for example, S2 and 5*3 are upper bounded by the probability that a 3- 
way cut fails, which by Corollary 4.8 is at most n" 3S / 2 . More generally, all 2 k values 
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S 2 k , . . . , S 2 >>+i_i are at most n ( k + 2 ) s / 2 _ It follows that the error in our approximation 
by the bound of Theorem 5.1 is 



j2su<J2 2kn ~ (k+2)s/2 

u>2 k>l 

k>l 

= 2n- 35 / 2 (l + o(l)) 

whenever S > 0. This quantity is o(p c ), and thus o(FAIL(p)), whenever n~ 3(5 / 2 = 
( n -(2+«)) ) i.e. 5 > 4. This proves Theorem 5.1. 

5.3. A PAS. We now use the inclusion-exclusion analysis to give a PAS for 
FAIL(p) when p c = n~( 2+(5 ) for some fixed 5 > 0, thus proving Theorem 5.2. We 
give an e-approximation algorithm with a running time of (n/e) 0X P(°(- lo s« e )), which 
is clearly polynomial in n for each fixed e (and in fact, for any e = n -0 ' 1 )). 

We must eliminate two uses of randomization: in the Contraction Algorithm for 
identifying the a-minimum cuts, and in the DNF counting algorithm for estimating 
their failure probability. 

The first step is to dctcrministically identify the near-minimum cuts of G. One 
approach is to use a derandomization of the Contraction Algorithm [?]. A more 
efficient approach is to use a cut enumeration scheme of Vazirani and Yannakakis [?] . 
This scheme enumerates cuts in increasing order of value, with a "delay" of O(mn) 
per cut. From the fact that there are only n 2a weak cuts, it follows that all weak cuts 
(in the sense of Section 3) can be found in 0(mn 1+2a ) time. 

We must now estimate the probability one of the near-minimum cuts fails. Let 
us consider truncating to the first k terms in the inclusion-exclusion expansion. From 
Corollary 5.5 we know that Pt[S u ] < n -(iog(«+i)+i)5/2. j t follows from Lemma 5.3 
that for any k < ^Slogn, our error from using the fc-term truncation of inclusion- 
exclusion is 

E ( U Z 2 )n-^ u+1 ^ s / 2 < n- 5 / 2 J2(u - 2) k - 2 (u + l)"*^")/ 2 

< VVu + l)fc-2-*(logn)/2 
u~>k 

< ^2(u+ 1) d '(l°g™)/3-2-5(logn)/2 
u~>k 

< ^(ti + i)-^")/'- 1 

u>k 

< / (u+ l)-«(logn)/6-l du 
Ju=k-1 

^,-(5(logn)/6 

(5(logn)/6 

n -6(logk)/6 

<5(logn)/6 

= („-«(logfc)/6) 
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This quantity is 0(en- (2+s '>) = 0(ep c ) = 0(eFAIL(p)) for some k = 2° ( - lo ^ € \ It 
follows that for an e-approximation we need only evaluate the inclusion exclusion up 
to the k th term. Computing the k th term requires examining every set of k of the 
(n/e)°^ a-minimum cuts; this requires (n/e) exp ^°'~ log ™ e ^ time. This concludes the 
proof of Theorem 5.2. 

We can slightly improve our bound on Pr[S u ], which in turn gives better bounds 
on k. 

Lemma 5.6. If u distinct a-minimum cuts fail, then a u 1/l2a -way cut fails. 

Proof. Consider a configuration in which u distinct cuts have failed simultane- 
ously. Suppose this induces k connected components. Let us contract each connected 
component in the configuration to a single vertex. In this contracted graph (before 
edges fail), the minimum cut is at least c (since contraction never reduces the mini- 
mum cut). Furthermore, each of the u failed cuts is a cut of value at most ac, and 
thus an a-minimum cut, in the contracted graph. Since the contracted graph has k 
vertices, we know from Theorem 2.6 that u < k 2a , meaning that k > u 1 / 2 ". □ 

However, this serves only to reduce the values of our constants (and reduce the 
running time from an exponential to a polynomial dependence on 1/5). 

6. The Tutte Polynomial. The Tutte Polynomial T(G; x, y) is a polynomial in 
two variables defined by a graph G. Evaluating it at various points x, y on the so-called 
Tutte Plane yields various interesting quantities regarding the graph. In particular, 
computing the network reliability REL(p) is the special case of evaluating the Tutte 
polynomial at the point x — l,y = 1/(1 — p). Another special case is counting 
the number of strongly connected orientations of an undirected graph, discussed in 
Section 3.5. Yet another is counting the number of forests in a graph. Alon, Frieze, 
and Welsh [?] showed that for any dense graph (one with il(n 2 ) edges) and fixed x 
and fixed y > 1 there is an FPRAS for the Tutte polynomial. 

6.1. Results. In this section, we prove the following: 

Theorem 6.1. For every y > 1 there is a c = 0(y\ognxy) (in particular, 
c = O(logn) for any fixed x and y) such that for all n-vertex m-edge graphs of edge- 
connectivity greater than c, 

T(G;x,y) = - (l + Q(l/n)). 



Thus, a good approximation can be given in constant time. Note that almost 
all graphs fall under this theorem as the minimum cut of a random graph is tightly 
concentrated around n/2 >• c. 

Theorem 6.2. For every y > 1 there is a c = 0(y log nxy) such that there is an 
FPRAS for T(G;x,y) . 

This theorem is perhaps unsurprising given the previous theorem. A slightly more 
challenging quantity is the "second order term" saying how far a given graph diverges 
from its approximation in the first theorem. 

Theorem 6.3. Let 

AT (G;x,y) = J -ll— i -T(G-x,y). 

For any fixed y > 1 and fixed x, there is a c = O(logra) such that there is an FPRAS 
for AT(G;x,y). 
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This theorem is stronger than and implies the previous theorem. When AT is 
very close to 0, ^J^-i accurately approximates T but approximating AT with small 
relative error is harder. 



6.2. Method. Our proofs begin with a lemma of Alon, Frieze, and Welsh [?] 
(which we have slightly rephrased to include what is for them the special case of 
x = 1): 

Lemma 6.4. [?] When y > 1, 



where Q = (x — l)(y — 1) and k is a random variable equal to the number of connected 
components ofG when each edge of G fails independently with probability p = 1 — 1/y. 
(In the case Q = (when x = 1), we use the fact that r = for r/0 while 0° = 1 .) 

In other words, when p r is the probability that the graph with random edge 
failures partitions into exactly r components, the Tutte polynomial can be evaluated 
from 

n 

E[Q K - 1 }=J2PrQ r ~ 1 - 
fe=l 

For the remainder of this section, we normalize our analysis by considering the quan- 
tity T'(G;x,y) = T(G;x,y) ^"T"' = £[<3 K_1 ]- Clearly, any results on relative 
approximations to T" translate immediately into results on relative approximations 
to T. 

We begin with an intuitive argument. From Theorem 2.9, when p c = n~( 2+<5 ' 
(which happens for some c = O(logn) for any fixed p) we know p r is negligible for 
r > 1. Intuitively, since p\ w 1 and all other p r « 0, we might as well approximate 
T' by Q. Extending this argument, we know that compared to P2, all terms p r for 
r > 2 are negligible. Therefore, the error in the approximation of T 1 by Q is almost 
entirely determined by P2Q 2 , which we can determine by computing p 2 - 

To prove our results formally, we have to deal with the fact that the term Q r 
in the expectation increases exponentially with r. We prove that the p r decays fast 
enough to damp out the increasing values of Q r . We also need to be careful that 
when Q < 0, the large leading terms do not cancel each other out. 



6.3. Proofs. For our formal analysis, instead of the quantities p r , it is more con- 
venient to work with quantities s r measuring the probability that the graph partition 
into r or more components. Note that s\ = 1 and s 2 — FAIL(p). Since p r = s r — s r+1 , 
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it follows that 



n 

T'(G;x,y)=J2PrQ r - 1 

r=l 

n 

= ^2( s r ~ Sr+l)<9 r_1 

n n 

- - ^ ^ Sr Q " ^ ^ SrQ 

r-1 r-2 
n 

= l + ^ Sr (Q r - 1 -Q r - 2 ) 

n 

= i + (g-i)^ Sr Q r - 2 

r=2 

Theorem 6.1 will follow directly from the last equation if we can show that the trailing 
term (Q-l) YT r =2 s rQ r ~ 2 = 0(l/n). Theorem 6.3 will follow if we can give an FPRAS 
for J2r=2 s rQ r ~ 2 - The fact that the value of this sum is o(l) (Theorem 6.1) means that 
the FPRAS for it immediately yields an FPRAS for T", thus proving Theorem 6.2. 

To prove these results, first consider the case x = 1. In this case Q = 0, meaning 
Q r - 2 = 1 for r = 2 and for r > 2. Thus T'(G; x, y) = l-s 2 = l-FAIL(p) = REL(p). 
We have already seen in Theorem 2.9 that whenever p c = n~( 2+5 \ the probability 
that the graph becomes disconnected is at most n~ & '(1 + 2/ '6). This is certainly 0(l/n) 
if 5 > 1, meaning REL(p) = 1 — 0(l/n). But this in turn is true when p c < n~ 3 , i.e. 

c > 31nn/ln(y/(y — 1)) = 0(ylnn). 

This proves Theorem 6.1 for Q = 0. On the other hand, Theorem 6.3 simply claims 
that there is an FPRAS for 1 - REL(p) = FAIL(p), which is what Section 2 showed. 
Finally, Theorem 6.2 says that when FAIL(p) is small, we can approximate REL(p) 
(by approximating FAIL(p)). 

We now generalize this argument to the case x > 1. To derive the appropriate 
lower bound on c, we state two criteria that will we need in our analysis. First, 
we require c to be such that p c = n~( 2+<5 ) for some S > 1. Equivalently, we have 
1 < 8 = — \og(n 2 p c )/ logn. Second, we require that Q < \n s ^. Plugging in for 8, we 
find the equivalent requirement 

Q < \n 5/i 

(4Q) 4 < 1/nV 

n 2 (4Q) 4 < (^-r 
V - 1 

ln(256Q 4 n 2 )/ln(l + — !— -) < c 

y - 1 

This is true for some c = 0(y(lnnQ)) = 0(y\nnxy) as claimed. 

Given the above relations between Q,n, and 8, we can use Corollary 4.8. Since 
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p c = n -(2+s)^ we deduce that s r < n - rS / 2 . Since Q < \n s / 4 < \n 5 ' 2 we find that 



n 

2 Sr Q r - 2 < Q- 2 ]T (Q n ~ s/2 Y (6- 1 ) 

r—ro r>ro 

< Q- 2 (Qn- 5 / 2 ) r °/(l - (Qn- 5 / 2 r°) 
<Q- 2 (Qn- S / 2 r/(l-±) 

< 2Q- 2 (Qn- s / 2 ) ro 

(6.2) 

Our results follow from this bound. First, taking ro = 2, we find that the error in 
approximating T'(G;x,y) by 1 is at most 

2n- 5 = o(l). 

This proves Theorem 6.1. 

To prove Theorem 6.3, note that the leading term in the summation (6.1) is 
32 > n~( 2+s \ We can therefore estimate the sum to within relative error O(e) by 
evaluating summation terms up to summation index ro where (Qn~ s ^ 2 ) r " < erT^ 2+s \ 
Since the left hand side decreases exponentially in n as a function of r , we can achieve 
this error bound by taking 

r = 0(log n (n 2+5 /e)) = 0(1 + log„ 1/c). 

In other words, we need only need to determine 0(1 — log„ e) terms in the summation. 
This in turn reduces to determining the quantities s r appearing in those terms. 

We cannot find the s r exactly. However, for an e-approximation, it suffices to 
approximate each relevant s r to within e. We can do so using the algorithm of 
Corollary 4.5. The running time of this algorithm for estimating the r-way failure 
probability to within e is (n r / e) oi - K We have argued above that we only need to run 
the algorithm for r < ro = 0(1 — log n e). It follows that the running time of our 
algorithm is n ' 1-105 -^^ ' 1 ' = (n/e) ^, as required. This proves Theorem 6.3. 

Finally, we consider the case x < 1. Our argument is essentially unchanged from 
before. We need to be slightly more careful because our sum is now an alternating 
sum, which means that the leading terms are a good approximation only if they do not 
cancel each other out. To see that such cancelling does not occur, note that the first 
term has value S2 = n~( 2+s \ while the remaining terms (by the analysis above) have 
total (absolute) value 0{n{Qn~ zs ^ 2 )). If we choose n large enough that Q < \n 8 ^, 
then this bound is 0(ln~ 5<5 / 4 ) < js 2 for S > 4, so the remaining terms do not cancel 

S2- 

7. Conclusion. We have given an FPRAS for the all-terminal network reliability 
problem and several variants. In the case of large failure probability, the FPRAS 
uses straightforward Monte Carlo simulation. For smaller failure probabilities, the 
FPRAS uses an efficient reduction to DNF counting or a less efficient deterministic 
computation. An obvious open question is whether there is also a deterministic PAS 
for the case of large failure probabilities. Another is whether there is also an FPRAS 
for REL(p) = 1 — FAIL(p), the question being open only for the case REL(p) near 0. 

This work has studied probabilistic edge failures; a question of equal importance 
is that of network reliability under vertex failures. We are aware of no results on 
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the structure of minimum vertex cuts that could lead to the same results as we 
have derived here for edge cuts. In particular, graphs can have exponentially many 
minimum vertex cuts. The same obstacle arises in directed graphs (where we wish to 
measure the probability of failing to be strongly connected) . 

Although the polynomial time bounds proven here are not extremely small, we 
expect much better performance in practice since most graphs will not have the large 
number of small cuts assumed for the analysis. Preliminary experiments [?] have 
suggested that this is indeed the case. 
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